1

CONTENT

1. How Does DNS Work?

2. General Use Cases for DNS Delegation
3. DNS Load Balancing with LTM (No GTM)
4. GSLB and Delegation Mode
5. DNS Delegation Sample Configuration
6. GSLB and Delegation Mode
7. BIG-IP DNS Authoritative Screen
8. Objects in the GTM Architecture

© F5 Networks, Inc.
 2

How Does DNS Work?

Is there a record for
www.domain.com?
LDNS
66.163.171.12
9
66.163.171.129
http://www.domain.com

The LDNS returns the A

record to the client and
caches it locally

The browser opens a connection

Root DNS Server to address:80 and does a GET /…
… And the server returns
(one of 16 from
root.hints) the Web page response

66.163.171.129
Web Server

.com DNS
Server
domain.com
DNS Server
© F5 Networks, Inc.
 3

General Use Cases for DNS Delegation

LDNS

www.subzone.company.com
returns an A record with the IP
address of the desired resource

CNAME www.company.com
to www.subzone.company.com

LDNS requests
www.subzone.company.com
LDNS requests
www.company.com
www.subzone.company.com
DNS Server

www.company.com
DNS Server

© F5 Networks, Inc.
 4

DNS Load Balancing with LTM (No GTM)

LDNS

LTM responds with

the DNS A record
Data Center

LDNS requests A i The DNS server responds

www.company.com
with an A record IP for
www.company.com
BIG-IP
Local Traffic Manager

LTM passes the

i DNS iRules* request to the DNS
server pool DNS Servers
A IP Anycast* company.com
*Requires DNS Services Add-on
© F5 Networks, Inc.
 5

GSLB and Delegation Mode

Is there a record for
www.company.com?
LDNS

http://www.company.com

Go
ask .com

Is there a record for

www.company.com?

Go ask Return CNAME Is there a record for

company.com www.gtm.company.com www.company.com?
Root
DNS Server
Data Center
Is there a record for
www.company.com?

BIG-IP
Global Traffic Manager
company.com
.com www.gtm.company.com
DNS Server
DNS Server

© F5 Networks, Inc.
 6

DNS Delegation Sample Configuration

Example database prior to delegation:

www.domain.com. IN A 200.10.10.10
www.domain.com. IN A 150.10.10.10

Example database after delegation:

wip.domain.com. IN NS gtm1.wip.domain.com.
wip.domain.com. IN NS gtm2.wip.domain.com.
gtm1.wip.domain.com. IN A 200.10.10.53
gtm2.wip.domain.com. IN A 150.10.10.54
www.domain.com. IN CNAME www.wip.domain.com.

© F5 Networks, Inc.
 7

GSLB and Delegation Mode

Is there a record for
www.gtm.company.com?
LDNS

http://www.company.com

Go
ask .com

Is there a record for

www.gtm.company.com?

Go ask Is there a record for

company.com www.gtm.company.com?
Root Is there a record for
DNS Server www.gtm.company.com?
Data Center

BIG-IP
Global Traffic Manager
company.com
.com www.gtm.company.com
DNS Server
DNS Server

© F5 Networks, Inc.
 8

GLSB and Delegation Mode

Is there a record for
www.company.com?
LDNS

66.163.171.129
http://www.company.com

Is there a record for

www.gtm.company.com?
66.163.171.129

Data Center

X BIG-IP
Global Traffic Manager
company.com
66.163.171.129 www.gtm.company.com
72.68.171.103 DNS Server

© F5 Networks, Inc.
 9

BIG-IP DNS Authoritative Screen

LDNS

If DNS Express is Else, forward the

Resolved DNS request enabled, check against
query to external DNS
DNS Express zones servers
and then local BIND
DNS Listener on the BIG-IP Data Center
receives all DNS requests

LDNS send a DNS query

BIG-IP
GTM/LTM-DNS Services

www.gtm.company.com company.com

If GTM is enabled , check GTM

Wide IPs and if matched, resolves
to the best IP
www.subzone.company.com
DNS Server

© F5 Networks, Inc.
 10

BIG-IP DNS Authoritative Screen

LDNS

Data Center

Q i X

BIG-IP
GTM/LTM-DNS Services

www.gtm.company.com company.com
X DNS Express
DNSSEC

Q Geolocation www.subzone.company.com
DNS Server
i DNS iRules

© F5 Networks, Inc.
 11

Objects in the GTM Architecture

Wide IP (WIP) objects Virtual servers objects
• Fully Qualified Domain • Names (FQDNs) associated
IP address:port withon
combinations one or more
server pools
objects
• Applications to load balance/resolve too
Pool objects • May represent multiple real servers (load balancers)
• to
Groups of virtual servers Orbe
a single physical (standalone) server
load balanced
• Server objects often host multiple virtual servers
Wide IP: www.f5.com = 73.37.1.1 or 68.28.1.1 or 205.33.1.1
GTM Pool

73.37.1.1:80 68.28.1.1:80
Virtual Server Virtual Server

GTM LTM GTM LTM GTM LTM

73.37.1.11:21 205.33.1.1:80
Virtual Server Virtual Server

Server Server
Primary DC Secondary DC Disaster Recovery DC
© F5 Networks, Inc.